Typosquatt alert ! Malicious npm Package: nyc-config

What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm

Snyk finds 200+ malicious npm packages, including Cobalt Strike dependency confusion attacks

Snyk recently discovered overt 200 malicious packages in the npm registry. While we acknowledge that vulnerability fatigue is an issue for d

TanStack NPM Packages Compromised

Article URL: Comments URL: Points: 38 # Comments: 3

NPM: Issues with package install, package publish, and login

Article URL: Comments URL: Points: 4 # Comments: 1

Malicious packages found to be typo-squatting in Python Package Index

A summary of two malicious typo-squatting packages recently removed from the Python Package Index.

MAL-2026-10081: Malicious code in webrix-docs1 (npm)

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (20cdefe1415c5b5245f36b10ea0de9033433b479768c2cc785a